44 matches found
CVE-2025-22702
Missing Authorization vulnerability in ThemeGoods Photography photography allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Photography: from n/a through = 7.7.2...
CVE-2025-22702
CVE-2025-22702 concerns WordPress Photography theme (Photography) with versions ≤ 7.5.2. The issue is a Missing/ Missing Authorization vulnerability (broken access control) that could allow unauthorized access to resources. Public documentation in connected sources identifies the affected produc...
PT-2025-6963 · Unknown · Epc Photography
Name of the Vulnerable Software and Affected Versions: EPC Photography versions n/a through 7.5.2 Description: The issue is related to a Missing Authorization vulnerability in EPC Photography. This vulnerability affects the Photography component, allowing unauthorized access. The estimated number...
WordPress plugin SEOPress – On-site SEO 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...
node-semver 安全漏洞
npm node-semver is a library from the American company npm. A security vulnerability exists in node-semver versions prior to 7.5.2, which stems from vulnerability to Regular Expression Denial of Service ReDoS attacks...
Vulnerabilities fixed in Mattermost
Unspecified vulnerabilities have been fixed in MatterMost. Mattermost has not released any substantive information released, but estimates the severity of the vulnerabilities as MEDIUM. The grading of this security advisory is accordingly accordingly. MatterMost indicates in accordance with their...
CVE-2020-14175
Affected versions of Atlassian Confluence Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting XSS vulnerability in user macro parameters. The affected versions are before version 7.4.2, and from version 7.5.0 before 7.5.2...
CVE-2020-14175
Affected versions of Atlassian Confluence Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting XSS vulnerability in user macro parameters. The affected versions are before version 7.4.2, and from version 7.5.0 before 7.5.2...
Security Bulletin: A Potential Information Disclosure has been identified in WebSphere Application Server shipped with Rational Asset Manager
Summary WebSphere Application Server is shipped as a component of IBM Rational Asset Manager. Information about a potential information disclosure in WebSphere Application Server has been published in a security bulletin. Vulnerability Details Please consult the security bulletin Security Bulleti...
Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with Rational Asset Manager (CVE-2016-0377)
Summary WebSphere Application Server is shipped as a component of Rational Asset Manager. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details Please consult the security bulletin Security Bulletin:...
Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with Rational Asset Manager (CVE-2016-0359)
Summary WebSphere Application Server is shipped as a component of Rational Asset Manager. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details Please consult the security bulletin Security Bulletin: HTTP...
Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Rational Asset Manager (CVE-2014-0114)
Summary IBM WebSphere Application Server is shipped as a component of IBM Rational Asset Manager. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details | Subscribe to My Notifications to be notified o...
Security Bulletin: Vulnerability in OpenSSL affects IBM DataPower Gateways (CVE-2017-3735)
Summary A potential vulnerability has been reported by the OpenSSL project. IBM DataPower Gateways has addressed the applicable CVE. Vulnerability Details Relevant CVE Information: CVEID: CVE-2017-3735 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information, caused by a...
Hyland Saperion Web Client Information Disclosure Vulnerability
Hyland Saperion Web Client is a client software for accessing the Saperion Enterprise Content Management System from Hyland, Inc. An information disclosure vulnerability exists in Hyland Saperion Web Client version 7.5.2 83166. A remote attacker can exploit this vulnerability to read arbitrary...
Remote code execution
Remote Code Execution in Saperion Web Client version 7.5.2 83166...
CVE-2018-6293
Arbitrary File Read in Saperion Web Client version 7.5.2 83166...
CVE-2018-6292
Remote Code Execution in Saperion Web Client version 7.5.2 83166...
Design/Logic Flaw
Arbitrary File Read in Saperion Web Client version 7.5.2 83166...